Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Userscape HelpSpot before 4.7.2. A reflected cross-site scripting vulnerability exists in the "return" parameter of the "index.php?pg=moderated" endpoint. It executes when the return link is clicked.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Userscape HelpSpot 跨站脚本漏洞
Vulnerability Description
Userscape HelpSpot是一套可扩展的开源客户服务软件。 Userscape HelpSpot 4.7.2之前版本中的‘index.php?pg=moderated’端点的‘return’参数中存在跨站脚本漏洞。远程攻击者可借助特制URL中的‘return’参数利用该漏洞在用户浏览器中执行脚本。
CVSS Information
N/A
Vulnerability Type
N/A